Make a Wish Studio ("we", "us", or "our"), located in Ukraine, provides the Make a Wish mobile application (the "App"). This Privacy Policy explains what information the App collects, why it is used, when it may be shared, how long it is retained, and the choices available to you.
By using the App, you acknowledge this Privacy Policy. If you do not agree, do not use the App.
1. Information we collect
1.1 Account information
When you sign in with Google, Firebase Authentication provides us with your Firebase user identifier (UID), display name, email address, and profile photo URL, where available. We use this information to authenticate you, secure the account, create your profile, and allow supported cross-device access. Your email is not displayed to other users through the App. Your chosen nickname may appear with public wishes.
1.2 Profile and gameplay information
We store your nickname and profile photo URL, virtual coin balance, wishes-created and wishes-liked counts, Mystery Coin state, Autumn Festival reward state, account timestamps, and local preferences such as music on/off.
1.3 Wishes and user-generated content
You choose whether each wish is public or private. Public wishes may include your UID, nickname, wish text, like count, moderation/visibility status, and timestamps. Other signed-in users and authorized moderators can view them. Private wishes are associated with your account and intended to be available only to you. They are not loaded into the moderation dashboard and are not sent to the AI moderation feature. Infrastructure providers still process them as necessary to store, secure, back up, maintain, and lawfully operate the service.
Do not put passwords, payment-card details, precise addresses, health records, government identifiers, or other highly sensitive information in any wish.
1.4 Likes, reports, and safety controls
We process records of wishes you like, authors you block, reports and reasons you submit, moderation notices, and related timestamps. Reports may identify the reporter, public wish, and reported author so we can investigate abuse.
1.5 Purchases
Google Play processes purchases. We may receive and store product, purchase, order, and token identifiers, purchase and consumption state, timestamps, and verification results to validate purchases, prevent duplicate credits and fraud, and deliver virtual coins. We do not receive or store complete payment-card numbers, bank credentials, or Google Play payment-method details.
1.6 Technical, integrity, and security information
Firebase App Check, Google Play Integrity, Firebase, Google Play, and Cloudflare may process App/package identity, integrity verdicts, device or app-instance signals, IP address, request metadata, authentication tokens, and security logs to prevent abuse, fraud, unauthorized clients, and attacks.
1.7 Information not intentionally collected
The App does not intentionally request precise GPS location, contacts, SMS messages, call logs, microphone recordings, camera images, or advertising identifiers. We do not use behavioral advertising or sell personal information.
2. How we use information
- Authenticate users, secure accounts, and provide profiles.
- Provide wishes, likes, reports, coins, rewards, and other App features.
- Display public wishes and store private wishes for their owner.
- Verify and fulfill Google Play purchases.
- Detect prohibited content, fraud, abuse, compromised clients, and security incidents.
- Review reports, warn users, moderate public content, and enforce our Terms.
- Troubleshoot, maintain, and improve reliability.
- Comply with law and protect users, the public, and our rights.
Depending on your country, processing is based on performance of our contract with you, legitimate interests in operating and securing the App, consent where required, and legal obligations. Withdrawal of consent does not affect earlier lawful processing.
3. Public content and moderation
Public wishes and nicknames may be visible to other users and can be copied or captured outside our control. They may be checked by client-side filters and sent to our Cloudflare Worker and Cloudflare Workers AI moderation service for automated classification. Automated systems can make mistakes. Authorized moderators may review public content and reports and hide, restore, or remove content or take account action. Private wishes are excluded from this AI/admin moderation workflow.
4. Sharing and international processing
- Google and Firebase: Google Sign-In, Firebase Authentication, Cloud Firestore, App Check, Play Integrity, Google Play Billing, and purchase verification.
- Cloudflare: Workers infrastructure for backend operations and purchase verification, and Workers AI for moderation of public wishes and nicknames.
- Other users: nickname, public wish text, like count, and related public content.
- Authorities or safety recipients: when reasonably necessary to comply with law, protect safety or rights, or investigate fraud and abuse.
- Business transfer: if the App or its assets are reorganized or transferred, subject to applicable safeguards.
We do not sell personal information or share it for cross-context behavioral advertising. Providers may process information outside Ukraine or your country under their contractual, organizational, and technical safeguards and applicable transfer requirements.
5. Retention
We retain information only as reasonably necessary to provide and secure the App, resolve disputes, prevent fraud, and meet legal obligations. Account data and wishes are generally kept while your account is active or until deleted. Reports, purchase verification, security, and fraud-prevention records may be kept longer when reasonably necessary. Google Play independently retains transaction records. Residual copies may temporarily remain in backups until normal deletion cycles complete. Anonymized information may be retained longer.
6. Account and data deletion
In the App, open Profile → Settings → Delete account, confirm, and complete Google re-authentication if requested. This removes the Authentication account and associated profile, authored wishes, likes, blocks, reports, purchase-delivery records, and notices, subject to limited lawful retention.
Uninstalling does not delete an account. If you cannot access the App, email makeawishgame@gmail.com from the connected Google email with subject Make a Wish account deletion and your nickname. Never send passwords or full card details. We may verify the request and aim to complete it within 30 days unless law permits or requires longer.
7. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or complain to a competent authority. You can edit your nickname, remove likes, block authors, choose public/private visibility for new wishes, and delete your account. Contact us for other requests. We may verify identity or limit a request where law permits, including to protect others or prevent fraud.
8. Children's privacy
The App carries a 12+ Google Play content rating. A store rating does not determine legal capacity to consent in a country. The App is general-audience and not primarily directed to children. Anyone unable to consent under local law may use it only with required parent/legal-guardian authorization and supervision. Contact us if a child provided data without required authorization.
9. Security
We use reasonable safeguards including authenticated access, Firestore Security Rules, App Check/Play Integrity, encrypted network transport, restricted administration, purchase verification, and moderation. No system is completely secure, so we cannot guarantee unauthorized access, loss, misuse, or disruption will never occur.
10. Third-party services
Google, Firebase, Google Play, and Cloudflare operate under their own terms and privacy policies. Their processing may be independent from ours. We are not responsible for their separate practices.
11. Changes
We may update this Policy when the App, providers, law, or processing changes. We will update the date above and provide additional notice or request consent when required.
12. Contact
Make a Wish Studio
Ukraine
Email: makeawishgame@gmail.com